Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3230302e31302e3233332e302f32342d3234203d3e203133363739.roa
File:                     3230302e31302e3233332e302f32342d3234203d3e203133363739.roa (raw, json)
Hash identifier:          gBnJ9/i4xeyAp1OAnWw1J4aqGMKhiph3As1iWYCD6u0=
Subject key identifier:   42:9A:5A:76:0F:99:32:98:58:60:C4:0E:E4:7D:CC:C2:D1:75:3E:39
Certificate issuer:       /CN=699C6BD3B24786A710F797596FEEF22BA6C952DB
Certificate serial:       3A3EF64FA79FDDA2B5863AD6F865F44807C908C5
Authority key identifier: 69:9C:6B:D3:B2:47:86:A7:10:F7:97:59:6F:EE:F2:2B:A6:C9:52:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3230302e31302e3233332e302f32342d3234203d3e203133363739.roa
Signing time:             Fri 22 May 2026 18:43:48 +0000
ROA not before:           Fri 22 May 2026 18:38:48 +0000
ROA not after:            Fri 21 May 2027 18:43:48 +0000
asID:                     13679
IP address blocks:        200.10.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3e:f6:4f:a7:9f:dd:a2:b5:86:3a:d6:f8:65:f4:48:07:c9:08:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699C6BD3B24786A710F797596FEEF22BA6C952DB
        Validity
            Not Before: May 22 18:38:48 2026 GMT
            Not After : May 21 18:43:48 2027 GMT
        Subject: CN=429A5A760F9932985860C40EE47DCCC2D1753E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:35:1f:dc:fb:fd:87:9f:38:40:7d:9d:5d:
                    4d:f7:1b:c6:83:3f:41:ed:05:fc:18:90:54:7e:9a:
                    aa:3e:01:50:d7:5d:e9:32:a0:b6:7e:fc:b5:c0:62:
                    76:8e:a5:83:e8:41:ca:38:b1:f6:e4:d5:01:23:5c:
                    f7:80:9b:57:76:f6:b3:57:e9:61:98:d3:89:ea:03:
                    71:43:b8:9e:85:b2:9d:06:7e:56:bf:61:84:80:f1:
                    69:0f:e9:6c:35:6a:fe:4c:06:33:b9:56:ca:6e:3b:
                    64:8b:a5:a2:98:8c:5a:b2:b1:10:70:76:41:61:fd:
                    86:53:fe:ae:9e:11:51:f5:f2:fe:b3:e3:33:6e:1d:
                    a2:f1:89:49:8b:5b:e7:ad:7f:08:50:a8:11:58:22:
                    8f:4f:76:76:10:00:88:3f:25:23:45:14:7f:d5:a5:
                    2c:9d:05:c0:4e:07:6b:0b:30:59:de:e8:4b:7e:c5:
                    ef:cb:16:ea:d6:37:bd:72:10:58:35:07:8b:df:f5:
                    1c:4d:28:87:ea:29:2a:34:e0:db:1d:b1:2b:e0:35:
                    da:20:ea:d1:e6:ab:23:90:ef:89:6b:58:c1:38:ab:
                    ff:5c:66:15:f8:ec:c2:34:25:88:83:65:e7:49:7f:
                    c2:92:64:a9:28:dd:ce:30:bf:6f:41:74:ed:05:a6:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:5A:76:0F:99:32:98:58:60:C4:0E:E4:7D:CC:C2:D1:75:3E:39
            X509v3 Authority Key Identifier:
                keyid:69:9C:6B:D3:B2:47:86:A7:10:F7:97:59:6F:EE:F2:2B:A6:C9:52:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/699C6BD3B24786A710F797596FEEF22BA6C952DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0343EF1DEA18792E0AE8AC7E01E1B65B5ED71A8E0E2FFA4B64BB7C114402F61E/0/3230302e31302e3233332e302f32342d3234203d3e203133363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:38:f3:b2:76:88:37:58:18:86:71:a8:c0:ca:2d:60:28:
         a1:56:7b:30:e0:aa:28:0e:c1:b5:4d:9c:69:a6:bf:ad:dd:ed:
         81:48:33:54:ae:21:c8:b2:db:43:44:43:3b:8f:8b:10:73:e8:
         a3:5e:86:65:4c:98:68:11:84:a6:7f:aa:3e:a5:76:97:e7:08:
         1b:1f:55:d7:11:89:ef:22:64:48:4e:77:8d:70:8d:bd:07:c8:
         c8:3d:74:f4:bd:ea:be:96:17:3d:17:9c:80:a7:c7:a0:19:c6:
         db:c6:db:4a:5c:f4:91:0a:86:77:3e:ec:41:f0:2f:fe:9d:a6:
         58:ff:e7:9f:0a:b8:98:6a:99:5d:d8:56:69:b6:83:86:f4:1a:
         c2:80:8d:a9:45:08:60:f3:09:2f:35:27:ef:1f:d8:b8:c6:ee:
         22:61:c6:fb:b7:87:c1:ca:e6:97:fa:fd:ad:45:85:4a:3a:c3:
         47:68:09:ac:9f:40:cd:93:dc:d6:43:78:49:dc:e5:08:c1:f8:
         50:a4:3c:0a:a0:ab:f9:bd:57:dc:e1:2d:a9:fe:36:c0:58:5b:
         c7:61:ec:78:96:ce:4f:22:e1:d3:2f:e3:0d:ba:ac:62:16:92:
         86:70:3d:c0:76:c6:1f:77:58:0e:00:f5:b2:34:38:ec:41:3f:
         62:00:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:41:52 2026 by rpki-client